Dovecot keeps shutting down and restarting.

Daniel Yi

• November 07, 2017 14:57

Hello, I've been noticing a lot of dovecot shut downs lately. I've brought it to the attention of my hosting provider, but they're not being of much help. Would appreciate some guidance.
Nov 2 10:07:22 srvr dovecot: master: Warning: Killed with signal 15 (by pid=28444 uid=0 code=kill)
Then all of the current imap accounts logged in will shut down.
Nov 2 10:07:23 srvr dovecot: master: Dovecot v2.2.32 (dfbe293d4) starting up for lmtp, imap, pop3 (core dumps disabled)
I checked the downtime stats on the server and below is the current trend.
- month of August: down 1 time (total 9sec) - month of September: down 5 times (total 50sec) - month of October: down 22 times (total 8m 59s) - month of November, only 7 days in: down 27 times (total 4m 41s)
You can obviously see that dovecot's downtime has been increasing. I've searched around exhaustively, but can't seem to find any leads. I'm on CentOS 6.9 and cPanel 66.0.26. Running CSF + LFD. Would greatly appreciate some help. Thank you.

• 

  cPanelMichael

  • November 07, 2017 20:01

  Hello, Do you notice any output to /var/log/maillog around the time of the failures? Thank you.

  0
• 

  Daniel Yi

  • November 07, 2017 20:13

  /var/log/mailog is where I'm seeing these. Below are the other lines from around the time this happens.
  Nov 7 13:57:29 srvr spamd[19787]: spamd: connection from ::1 [::1]:42354 to port 783, fd 5 Nov 7 13:57:29 srvr dovecot: pop3-login: Aborted login (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session= Nov 7 13:57:29 srvr spamd[19778]: prefork: child states: II Nov 7 13:57:29 srvr dovecot: lmtp(8985): Connect from local Nov 7 13:57:29 srvr dovecot: lmtp(8985): Disconnect from local: Successful quit Nov 7 13:57:29 srvr dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__jcsuq1jjmmgi8ulofn3xnengqmd5hqvvf1obj9snszqkew...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=8990, secured, session= Nov 7 13:57:29 srvr dovecot: imap(__cpanel__service__auth__imap__jcsuq1jjmmgi8ulofn3xnengqmd5hqvvf1obj9snszqkeww3xmssatpyczj1hjzj): Logged out in=11, out=450, bytes=11/450 Nov 7 13:57:38 srvr dovecot: imap-login: Login: user=, method=PLAIN, rip=172.56.35.198, lip=123.456.78.90, mpid=9052, TLS, session=<6Wqg+2ldGvOsOCPG> Nov 7 13:57:57 srvr dovecot: imap(sales@keum.us): Connection closed (IDLE running for 0.001 + waiting input for 2476.432 secs, 2 B in + 10 B out, state=wait-input) in=822, out=2896, bytes=822/2896 Nov 7 13:58:03 srvr dovecot: imap(danny@email.xxx): Logged out in=531, out=5756, bytes=531/5756 Nov 7 13:58:18 srvr dovecot: imap(briana@email.xxx): Connection closed (IDLE finished 1219.439 secs ago) in=2911, out=25916, bytes=2911/25916 Nov 7 13:58:21 srvr dovecot: imap(keum@keum.us): Connection closed (IDLE running for 0.001 + waiting input for 2439.872 secs, 2 B in + 10 B out, state=wait-input) in=1169, out=39384, bytes=1169/39384 Nov 7 13:59:30 srvr dovecot: imap(info@keum.us): Connection closed (IDLE running for 0.001 + waiting input for 2569.872 secs, 2 B in + 10 B out, state=wait-input) in=826, out=2926, bytes=826/2926 Nov 7 13:59:41 srvr dovecot: master: Warning: Killed with signal 15 (by pid=9356 uid=0 code=kill) Nov 7 13:59:41 srvr dovecot: imap(danielle@email.xxx): Server shutting down. in=11970, out=60217, bytes=11970/60217 Nov 7 13:59:41 srvr dovecot: imap(stephen@email.xxx): Server shutting down. in=995, out=19157, bytes=995/19157 Nov 7 13:59:41 srvr dovecot: imap(joannek@email.xxx): Server shutting down. in=47, out=763, bytes=47/763 Nov 7 13:59:41 srvr dovecot: imap(ki@email.xxx): Server shutting down. in=302, out=1116, bytes=302/1116 Nov 7 13:59:41 srvr dovecot: imap(teress@email.xxx): Server shutting down. in=20183463, out=86739, bytes=20183463/86739 Nov 7 13:59:41 srvr dovecot: imap(paul@email.xxx): Server shutting down. in=10685, out=2685, bytes=10685/2685 Nov 7 13:59:41 srvr dovecot: imap(danielle@email.xxx): Server shutting down. in=24058, out=143948, bytes=24058/143948 Nov 7 13:59:41 srvr dovecot: imap(danny@email.xxx): Server shutting down. in=47, out=814, bytes=47/814 Nov 7 13:59:41 srvr dovecot: imap(teress@email.xxx): Server shutting down. in=36224, out=287666, bytes=36224/287666 Nov 7 13:59:41 srvr dovecot: imap(briana@email.xxx): Server shutting down. in=3251, out=35009, bytes=3251/35009 Nov 7 13:59:41 srvr dovecot: imap(info@email.xxx): Server shutting down. in=34008, out=88991, bytes=34008/88991 Nov 7 13:59:41 srvr dovecot: imap(stephen@email.xxx): Server shutting down. in=217, out=2536, bytes=217/2536 Nov 7 13:59:41 srvr dovecot: imap(info@email.xxx): Server shutting down. in=7214, out=355051, bytes=7214/355051 Nov 7 13:59:41 srvr dovecot: imap(danny@email.xxx): Server shutting down. in=394, out=4514, bytes=394/4514 Nov 7 13:59:41 srvr dovecot: imap(info@email.xxx): Server shutting down. in=30318, out=70089, bytes=30318/70089 Nov 7 13:59:41 srvr dovecot: imap(briana@email.xxx): Server shutting down. in=3578, out=34662, bytes=3578/34662 Nov 7 13:59:41 srvr dovecot: imap(paul@email.xxx): Server shutting down. in=312, out=6255, bytes=312/6255 Nov 7 13:59:41 srvr dovecot: imap(stephen@email.xxx): Server shutting down. in=447, out=7138, bytes=447/7138 Nov 7 13:59:41 srvr dovecot: imap(danny@email.xxx): Server shutting down. in=3754, out=16840, bytes=3754/16840 Nov 7 13:59:41 srvr dovecot: imap(paul@email.xxx): Server shutting down. in=7233, out=466645, bytes=7233/466645 Nov 7 13:59:42 srvr dovecot: master: Dovecot v2.2.32 (dfbe293d4) starting up for lmtp, imap, pop3 (core dumps disabled)
  

  0
• 

  cPanelMichael

  • November 08, 2017 14:31

  Hello, Could you open a support ticket using the link in my signature so we can access your system to take a closer look? Thank you.

  0

Please sign in to leave a comment.